Hi,

I discovered that bug today and wrote a patch, I tested it against
mailman 2.1.13 (as found in Squeeze); I tracked the change in Mailman
and found it to be revision 972:

  CGI/admin.py
   The email address which forms a part of the various CGI data keys
   in the admin membership list is now urllib.quote()ed. This allows
   changing options for and unsubbing an address which contains a
   double-quote character.

  -- http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/972


        Fred

--- listadmin.pl.orig   2013-09-14 13:10:33.760699371 +0200
+++ listadmin.pl        2013-09-14 13:11:54.785101152 +0200
@@ -588,7 +588,7 @@
 
 sub url_quote_parameter {
     my $param = shift;
-    $param =~ s/(\W)/sprintf ("%%%02x", ord ($1))/ge;
+    $param =~ s/(\W)/sprintf ("%%%02X", ord ($1))/ge;
     $param;
 }
 
@@ -1763,6 +1763,7 @@
                  user => \@addresses);
     for my $a (@addresses) {
        $params{$a . "_unsub"} = "on";                  # Mailman 2.x
+       $params{url_quote_parameter($a) . "_unsub"} = "off" # Mailman >=2.1.12
     }
     my $resp = $ua->post($url, \%params);
     return $resp->status_line unless $resp->is_success;


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to